Cross-Site Scripting Vulnerability in Empathy by GNOME
CVE-2011-4170

Currently unrated

Key Information:

Vendor

Gnome
Status
Empathy
Vendor
CVE Published:
23 October 2011

What is CVE-2011-4170?

The vulnerability exists in the theme_adium_append_message function of the Adium theme within libempathy-gtk in Empathy versions 3.2.1 and earlier. It enables remote attackers to exploit crafted aliases (nicknames) in /me events, thereby injecting malicious web scripts or HTML content. Successful exploitation can lead to unauthorized actions performed on behalf of users, causing potential data breaches and disruption.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://bugzilla.gnome.org/show_bug.cgi?id=662035
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.